Release control / web security

Catch the change.
Ship with proof.

Compare production with a preview, or inspect one site. PreviewShield reads response metadata—never response bodies.

Configure run

What should we inspect?

01 / 03

Production URL The known baseline. Preview URL The release candidate.

Policy profile

Balanced Practical defaults Strict Higher assurance

Block at Minimum severity that fails the run.

Routes One origin-relative route per line. Up to 20.

Advanced network access

Private targets are locked

Restart with previewshield ui --allow-private-targets only when you need to inspect a trusted localhost or private service.